Register for this year’s #ChromeDevSummit happening on Nov. 11-12 in San Francisco to learn about the latest features and tools coming to the Web. Request an invite on the Chrome Dev Summit 2019 website

Find and inspect the code that's preventing pasting

To quickly find and inspect the code that's preventing pasting, try enabling the Clipboard >
paste checkbox in the Event Listener Breakpoints section of Chrome DevTools, then
pasting into a password field. DevTools should pause on the first line of code in the paste
event listener.

More information

Lighthouse gathers all <input type="password"> elements, pastes some text into each element,
and then verifies that the element's content has been set to the pasted text. If a page
doesn't use <input type="password"> for its password input fields, Lighthouse doesn't detect
those elements. It's also possible to prevent pasting outside of a paste event listener.
Lighthouse doesn't detect that scenario, either.